XSS fix for category descriptions